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Abstract. We utilize effective algorithms for computing in the cohomology of a Shimura 
curve together with the Jacquet-Langlands correspondence to compute systems of Hecke 
eigenvalues associated to Hilbert modular forms over a totally real field F. 

(N 

■ The design of algorithms for the enumeration of automorphic forms has emerged as a 

pL| . major theme in computational arithmetic geometry. Extensive computations have been 
carried out for elliptic modular forms and now large databases exist of such forms [5l [35] . 
As a consequence of the modularity theorem of Wiles and others, these tables enumerate 
f— ( ' all isogeny classes of elliptic curves over Q up to a very large conductor. The algorithms 
| 7 | . employed to list such forms rely heavily on the formalism of modular symbols, introduced by 
(-H I Manin p6] and extensively developed by Cremona [1], Stein [M], and others. For a positive 
I integer N, the space of modular symbols on ro(A^) C SL2(Z) is defined to be the group 
Hl(Yo{N){C),C) of compactly supported cohomology classes on the open modular curve 
yo(A^)(C) = ro(A^)\'H, where "H denotes the upper half-plane. Let S'2(ro(A^)) denote the 
^ , space of cuspidal modular forms for ro(iV). By the Eichler- Shimura isomorphism, the space 
> ' 5'2(ro(A^)) embeds into H^{Yo{N){C), C) and the image can be characterized by the action of 
the Hecke operators. In sum, to compute with the space of modular forms 5'2(ro(iV)), one can 
^ ! equivalently compute with the space of modular symbols H^{Yo{N){C), C) together with its 
I Hecke action. This latter space is characterized by a natural isomorphism of Hecke-modules 

O ■ Hl{YoiN)iC)X) = Homr„(^)(DivOpi(Q),C), 

o^ : 

O ■ where a cohomology class 00 is mapped to the linear functional which sends the divisor 
s — r E Div° P^(Q) to the integral of to over the image on Yo{N) of a path in "H between the 
cusps r and s. 

Modular symbols have proved to be crucial in both computational and theoretical roles. 
They arise in the study of special values of L-functions of classical modular forms, in the 
formulation of p-adic measures and p-adic L-functions, as well as in the conjectural construc- 
tions of Gross-Stark units [8] and Stark-Heegner points [7|. It is therefore quite inconvenient 
that a satisfactory formalism of modular symbols is absent in the context of automorphic 
forms on other Shimura varieties. Consequently, the corresponding theory is not as well 
understood. From this point of view, alternative methods for the explicit study of Hilbert 
modular forms are of particular interest. 

Let -F be a totally real field of degree n = [F : Q] and let Tjp denote its ring of integers. Let 
5*2 denote the Hecke module of (classical) Hilbert modular cusp forms over F of parallel 
weight 2 and level 91 C Zj?. Dembele [12] and Dembele and Donnelly [13j have presented 
methods for computing with the space 5*2 (91) under the assumption that n is even. Their 
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strategy is to apply the Jacquet-Langlands correspondence in order to identify systems of 
Hecke eigenvalues occurring in 5*2 (0^) inside spaces of automorphic forms on , where 
B is the quaternion algebra over F ramified precisely at the infinite places of F — whence 
their assumption that n is even. In this way, Dembele and his coauthors have convincingly 
demonstrated that automorphic forms on totally definite quaternion algebras, corresponding 
to Shimura varieties of dimension zero, are amenable to computation. 

Here, we provide an algorithm which permits this computation when n is odd. We lo- 
cate systems of Hecke eigenvalues in the (degree one) cohomology of a Shimura curve. We 
explain how a reduction theory for the associated quaternionic unit groups, arising from a 
presentation of a fundamental domain for the action of this group [38] , allows us to compute 
the Hecke module structure of these cohomology groups in practice. Our methods work 
without reference to cusps or a canonical moduli interpretation of the Shimura curve, as 
these features of the classical situation are (in general) absent. 

Our main result is as follows. 

Theorem. There exists an algorithm which, given a totally real field F of strict class num- 
ber 1 and odd degree n, and an ideal ''Xt ofZp, computes the system of Hecke eigenvalues 
associated to Hecke eigenforms in the space 5*2(91) of Hilbert modular forms of parallel weight 
2 and level Dl. 

In fact, our methods work more generally for fields F of even degree as well (under a 
hypothesis on 91) and for higher weight k, and therefore overlap with the methods of Dembele 
and his coauthors in many cases; see the precise statement in Theorem 13.101 below. This 
overlap follows from the Jacquet-Langlands correspondence, but it can also be explained 
by the theory of nonarchimedean uniformization of Shimura curves: one can describe the 
Cp-points of a Shimura curve, for suitable primes p, as the quotient of the p-adic upper half- 
plane "Hp by a definite quaternion order of the type considered by Dembele. (For a discussion 
of the assumption on the class number of F, see Remark 13.111 ) In particular, this theorem 
answers (in part) a challenge of Elkies [T7] to compute modular forms on Shimura curves. 

The article is organized as follows. In §§1-2, we introduce Hilbert modular forms (§T]) and 
quaternionic modular forms (Q and the correspondence of Jacquet-Langlands which relates 
them. In ^ we discuss how systems of Hecke eigenvalues associated to certain Hilbert or 
quaternionic modular forms may be found in cohomology groups of Shimura curves. The 
rest of the paper is devoted to explicit computation in these cohomology groups. In ^ we 
discuss algorithms for representing quaternion algebras and their orders. In ^ we show 
how the fundamental domain algorithms of the second author allow for computation in the 
cohomology of Fuchsian groups, and we show how algorithms for solving the word problem 
in these groups is the key to computing the Hecke action. We conclude by presenting 
applications and examples of our algorithms. 

Beyond applications to the enumeration of automorphic forms, the techniques of this paper 
hold the promise of applications to Diophantine equations. The first author [19] has proposed 
a conjectural, p-adic construction of algebraic Stark-Heegner points on elliptic curves over 
totally real fields. These points are associated to the data of an embedding of a non-CM 
quadratic extension K of a totally real field F into a quaternion F- algebra B. Note that 
such a quaternion algebra cannot be totally definite. We propose to generalize the formalism 
of overconvergent modular symbols employed in [9] in the case B = M2(Q) to the general 
quaternionic situation in order to allow for the efficient calculation of these points. 
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1. HiLBERT MODULAR FORMS 

We begin by defining the space of classical Hilbert modular cusp forms. Our main reference 
for standard facts about Hilbert forms is Freitag [T8] . 

Let F be a totally real field of degree n = [F : Q] with ring of integers Z^. Throughout, 
we assume that the strict class number of F is equal to 1 (see Remark 13.111 for comments 
on this assumption). Let Vi, . . . ,Vn be the embeddings of F into M. If x G F, we write Xi 
as a shorthand for Vi{x). Each embedding Vi induces a embedding Vi : M2(-F) M2(M). 
Extending our shorthand to matrices, if 7 G M2(-F) we write 7^ for ^1(7). Let 

GL+(F) = {7 G GL2(F) : det7i > for all i = l,...,n}. 

The group GL^(F) acts on the cartesian product "H" by the rule 

7(ri,...,r„) = (7in,---,7ni"n) 

where as usual GL^(]R) acts on "H by linear fractional transformations. 
Let 7 = (« ^) G GL2(M) and t e U. We define 

(1.1) j(7,r) = cr + rf G C. 
For a weight 

(1.2) k={h,...,k„) G (2Z>o)", 

we define a right weight k action of GL^(F) on the space of complex- valued functions on 
by 



(/U7)(r) = /(7r)n(det7.)'"/'j(7.,r.: 



hi 

!tj J \ It, n) 
i=l 

for / : ^ C and 7 G GLj(F). The center of GLj(F) acts trivially on such /. 
Therefore, the weight k action descends to an action of PGL^(F) = GL^(F)/F^. 
Now let OX be a (nonzero) ideal of Zp- Define 

^°^^) = {(c J) eGL+(Z^):cGai 

A Hilbert modular cusp form of weight k and level Fo(OT) is an analytic function / : — )■ C 
such that / |fc 7 = / for all 7 G Fo(OT) and such that / vanishes at the cusps of Fo(9T). We 
write Ski'^yi) = S'fc(Fo(9T)) for the finite-dimensional C- vector space of Hilbert modular forms 
of weight k and level Fo(9T). (See Freitag [ISl Chapter 1] for proofs and a more detailed 
exposition.) 

The space SkiW) is equipped with an action of Hecke operators as follows. Let p be a 
(nonzero) prime ideal of with p f 91. Write Fp for the residue field of Zi? at p. By our 
assumption that F has strict class number one, there exists a totally positive element p G Zi? 

which generates the ideal p. Let tt = ( Then there are elements 7a G F = Fo(9'I), 



p 



3 



TT 



indexed by a G P"^(Fp), such that 

(1.3) r7rr= y ra„, 

where aa = i^'ja- If / G S'fc(DT), we define 

Then / 1 Tp also belongs to S'fc(DT) and the operator Tp : Ski^) — )• is called the Hecke 

operator associated to the ideal p. One verifies directly that Tp depends only on p and not 
on our choice of generator p of p or on our choice of representatives fll.3p for ryrvrr. 

Suppose instead now that p is a prime ideal of Zp such that p*^ || Let p and n be 
totally positive generators of p and n, respectively. Then there exist x,y E Zp such that 
xp<^ — y(^n/p'^) = 1. The element 

^xp^ y 
n p^ 

with det Tc = p^ normalizes F, and we have vr^ G F^r. Setting 

f\Wp.=f\7r, 

we verify that Wpe is an involution of 5*2 (O'T), called an Atkin-Lehner involution, and this 
operator depends only on the prime power p^ and not on its generator p or the elements x, y. 

We conclude this section by defining the space of newforms. Let 971 be an ideal ofZp with 
VJl I For any totally positive element d \ 9197t~^ we have a map 

f^f\ (^?)- 

We say that / G 5^(91) is an oldform at 9Jl if / is in the image of hd for some d \ DlOJt^^. 
Let 5*^(91)^'"°'*^ denote the space of oldforms at 971. Then we can orthogonally decompose 
the space 5*^(9^) as 

and we say that / G Sk{^) is a newform at OJtif / G 5fc(9t)®^-''^^. 

2. QUATERNIONIC MODULAR FORMS 

Our main reference for this section is Hida [23_j §2.3]. Let i? be a quaternion algebra over 
F which is split at the real place vi and ramified at the real places V2, ■ ■ ■ ,Vn (and possibly 
some finite places). Let D be the discriminant of B, the product of the primes of Z^? at 
which B is ramified. Let oj{T)) denote the number of distinct primes dividing D. Then since 
a quaternion algebra is ramified at an even number of places, we have 

(2.1) u{D) = n~l (mod 2). 

We note that the case D = (1) is possible in (12. ip if and only if n is odd. For unity of 
presentation, we assume that ooi^D) + > 1 or equivalently that B ^ M2(Q) or that i? is a 
division algebra. 

Since B is split at vi, we may choose an embedding 

(2.2) Li : B ^ B ^M2(R). 
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We denote by nrd : B F the reduced norm on B, defined by nrd(7) = 77 where 
~ : B — )■ 5 is the unique standard involution (also called conjugation) on B. Let B^ denote 
the subgroup oi B^ consisting of elements with totally positive reduced norm. Since B is 
ramified at all real places except f 1, an element 7 e has totally positive norm if and only 
if fi(nrd(7)) > 0, so that 

(2.3) Bl = {-i eB"" : 171 (nrd 7) = det ^1(7) > 0}. 

The group B^ acts on l-L via fi; we write simply 71 for ^1(7). As C -B+ acts trivially on 
% via ti, the action of B^ on l-L descends to the quotient B^/F^. 

For an integer m > 0, let Pm = -Pm(C) be the subspace of C[x, y] consisting of homogeneous 
polynomials of degree m. In particular, Pq = C. For 7 G GL2(C), let 7 be the adjoint of 
7, so that 77 = det 7. Note that this notation is consistent with the bar notation used 
for conjugation in a quaternion algebra as Li is an isomorphism of algebras with involution: 
'•1(7) = '■1(7)- Define a right action of GL2(C) on Pm(C) by 

(g ■ 7)(a;, y) = q{{x y)^) = q{dx - cy, -bx + ay) 

for 7 = ("^) G GL2(C) and q G Pm(C). For £ G Z, define a modified right action ■£ of 
GL2(C) on P„(C) by 

g-£7 = (det 7)^ (g- 7). 

We write Pm(^)(C) for the resulting right GL2(C)-module. 

Let be a weight as in fll.2l) and let Wi = ki — 2 for i = 2, . . . , n. Define the right 
GL2(C)"-i-module 

(2.4) W{C) = P^,{-w,/2){C) ® ■ • • 8) P^„(-m„/2)(C). 
For the ramified real places f2, . . . , fn of P, we choose splittings 

(2.5) Li-. B ^ B^fC^ M2iC). 

We abbreviate as above 7^ = ^1(7) for 7 G P. Then W{C) becomes a right P^-module via 
7 ^ (725 • • • ,ln) £ GL2(C)"~"'^. We write (a;, 7) t-)- x'^ for this action. We define a weight k 
action of B^ on the space of Vr(C)- valued functions on T-L by 

(/U7)(t) = (det7i)'=^/'j(7i,r)-'=V(7ir)^ 

for / : "H W{C) and 7 G P+, where j is defined as in (ILTI) . Note that the center P"" C P+ 
again acts trivially, so the action descends to B^/F^. We endow W{C) with an analytic 
structure via a choice of linear isomorphism W{C) = C*^*^^"^-' "*-'^""^^; the resulting analytic 
structure does not depend on this choice. 

Let OX be an ideal of Z^? which is prime to D and let (9o(OT) be an Eichler order in B 
of level 9T. We denote by Oo(OI)^ C P+ the units of Co (01) with totally positive reduced 
norm, as m (1^ . and we let r^(OT) = Co(OI)^/Z^_+, where Z^^^ denotes the units of Zp 
with totally positive norm. A quaternionic modular form of weight k and level (9o(Ol) is an 
analytic function / : "H ^ W{C) such that / ^ 7 = / for all 7 G Co(OI)^. We write Sf{m) 
for the finite-dimensional C-vector space of quaternionic modular forms of weight k and level 

Oo{m). 

Spaces of quaternion modular forms can be equipped with the action of Hecke operators. 
Let p be a prime ideal of Z^r with p f 2)01. Since P has strict class number 1, by strong 
approximation [37', Theoreme III. 4. 3] there exists vr G Oq{^) such that nrdvr is a totally 
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positive generator for the ideal p. It follows that there are elements 7a G F = ro(OT;), indexed 
by a G P^(Fp), such that 

(2.6) r7rr= IJ Vaa, 

where = T^la- We define the Hecke operator Tp : 5*^(91) — ?■ Ski^) by the rule 

(2.7) /|Tp= J2 /l'^"- 

The space S'f (DT) also admits an action of Atkin-Lehner operators. Now suppose that 
p*^ C is a prime power with p'^ \\ DOT. (Recall that e = 1 if p | 2) and that D and are 
coprime.) Then there exists an element tt G Oo(^) whose reduced norm is a totally positive 
generator of and such that vr generates the unique two-sided ideal of Co(^) with norm p"^. 
The element vr normalizes Co(^) and vr^ g Co(^) C Co(^)''i^'' (see Vigneras [371 Chapitre 
II, Corollaire 1.7] for the case p | D and the paragraph following [371 Chapitre II, Lemme 
2.4] if p I DT). Thus, we define the Atkin-Lehner involution W^e : 5'fc(0T) — )■ S'fc(9T) by 

(2.8) f\W,. = f\k7r 

for / G 5'fc(9T). As above, this definition is independent of the choice of vr and so only depends 
on the ideal p"^. 

The following fundamental result — the Jacquet-Langlands correspondence — relates these 
two spaces of Hilbert and quaternionic modular forms. 

Theorem 2.9. There is a vector space isomorphism 

which is equivariant for the actions of the Hecke operators Tp with p f and the Atkin- 
Lehner involutions Wpe with ]| S)D1. 

A useful reference for the Jacquet-Langlands correspondence is Hida [201 Proposition 2.12], 
where Theorem l2.9l is deduced from the representation theoretic results of Jacquet-Langlands. 
In particular, when n = [F : Q] is odd, we may take 2) = (1) to obtain an isomorphism 

3. Quaternionic modular forms and the cohomology of Shimura curves 

In this section, we relate the spaces S'f (DT) of quaternionic modular forms, together with 
their Hecke action, to the cohomology of Shimura curves. As above, let F = r^(^rt) = 
Oo(^)+/^F. The action of F on ?^ is properly discontinuous. Therefore, the quotient V\l-i 
has a unique complex structure such that the natural projection "H — )■ T\l-i is analytic. Since 
B is, by assumption, a division algebra, V\H has the structure of a compact Riemann surface. 
By the theory of canonical models due to Shimura [31] and Deligne [10] , this Riemann surface 
is the locus of complex points of the Shimura curve X = X^(DT) which is defined over F, 
under our assumption that F has strict class number 1. 

Define the right GL2(C)" = GL2(C) x GL2(C)"-i-module 

n 

ViC) = (g)P^,(-«;,/2)(C) = P^,{-w^/2){C) W{C). 

i=l 

6 



The group acts on V{C) via the embedding GL2(C)"' given by 7 i— )■ (71, . . .7„) 

arising from (12 ■2p and (12. 5p . As acts trivially on P^^(— wi/2)(C) via li and on W{C) via 
(i2, • • • , in), the action of Co(^)+ C -B^ on V^(C) descends to a right action of T on ^(C). 

It is convenient to identify V^(C) with the subspace of the algebra C[xi, yi, . . . , x„, ?/„] 
consisting of those polynomials q which are homogeneous in (xj, yi) of degree Wi. Under this 
identification, the action of 5^ on V{C) takes the form 

n 

q'^{xi,yi, . . .,Xn,yn) = JJ(det7i)""'*/^g((xi 2/1)71, . . . (x„ yn)%)- 

i=l 

Let V = V{C). We now consider the cohomology group H^{r,V). We represent ele- 
ments of H^{r, V) by (equivalence classes of) crossed homomorphisms. Recall that a crossed 
homomorphism (or 1-cocycle) / : F — is a map which satisfies the property 

(3.1) f{lS) = f{^)' + f{6) 

for all 7, 5 G r. A crossed homomorphism / is principal (or a 1-coboundary) if there is an 
element g & V such that 

(3.2) f(^)=g^-g 

for all 7 G r. Let Z^{r, V) and -B^(r, V) denote the spaces of crossed homomorphisms and 
principal crossed homomorphisms from F into V, respectively. Then 

H\T, V) = Z\T, V)/B\T, V). 

We now define (for a third time) the action of the Hecke operators, this time in cohomology. 
Let / : r -^^ be a crossed homomorphism, and let 7 G F. Recall the definition of Hecke 
operators (l2.6H2.7p . There are elements 5^ G F for a G P^(Fp) and a unique permutation 7* 
of pi(Fp) such that 

(3.3) aa7 = SaOiy'a 

for all a. Define / | Tp : F — )■ K by 

(3.4) (/|Tp)(7)= E fiSar. 

It is a standard calculation [321 §8.3] that / 1 Tp is a crossed homomorphism and that Tp 
preserves 1-coboundaries. Moreover, / | Tp does not depend on our choice of the coset rep- 
resentatives aa- Therefore, Tp yields a well-defined operator 

Tp : H\T,V) ^ H\T,V). 

Remark 3.5. One may in a natural way extend this definition to compute the action of any 
Hecke operator T^ for a C Zp an ideal with (a, 2)DT) = 1. 

We now define an operator corresponding to complex conjugation. Let /i G (9o(^)^ be 
an element such that f (nrd yu) < 0; such an element exists again by strong approximation. 
Then fi normalizes F and //^ G F. If / G Z^(r, V) then the map / | Woo defined by 

(3.6) (/|W^oo)(7) = /(/i7/i-')" 

is also a crossed homomorphism which is principal if / is principal, so it induces a linear 
operator 

Woo:H\r,V)^H\r,V). 
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Since /i^ G F and acts trivially on V, the endomorphism Woo has order two. Therefore, 
H^{r, V) decomposes into eigenspaces for Woo with eigenvalues +1 and —1, which we denote 

H\r, V) = H\r, v)+ © H\r, v)-. 

It is not hard to see that Tp commutes with Woo- Therefore, Tp perserves the ±-eigenspaces 
of H\T,V). 

The group -f^^(r, V) also admits an action of Atkin-Lehner involutions. Letting p, e, and 
TT be as in the definition of the Atkin-Lehner involutions (I2.8p in §21 we define the involution 
Wpe on H\T,V) by 

(3.7) (f\W,.)i^) = f{7r^n-'r. 

We conclude this section by relating the space of quaternionic modular forms to co- 
homology by use of the Eichler-Shimura isomorphism (in analogy with the classical case 
B = M2(Q) [3?, §8.2]). We choose a base point t eU, and for / e Sf{^) we define a map 

ES(/) :T^V 

by the rule 

ES(/)(7) = r fiz)izx, + y.rdz G \/(C). 

A standard calculation [321 §8.2] shows that ES(/) is a crossed homomorphism which depends 
on the choice of base point r only up to 1-coboundaries. Therefore, ES descends to a 
homomorphism 

ES ■.Sk{T)^H\T,V). 

Let 

ES^:Sk{r)^H\r,Vf. 
be the composition of ES with projection to the ±-subspace, respectively. 

Theorem 3.8 ([27, §4]). The maps are isomorphisms (of C-vector spaces) which are 
equivariant with respect to the action of the Hecke operators Tp for p \ and W^e for 
II DOI. 

In sum, to compute the systems of Hecke eigenvalues occurring in spaces of Hilbert modular 
forms, combining the Jacquet-Langlands correspondence (Theorem 12.91) and the Eichler- 
Shimura isomorphism (Theorem 13. Sp . it suffices to enumerate those systems occurring in the 
Hecke module H\T,V{C))+. 

Let C Zi? be an ideal. Suppose that admits a factorization ^ = DTI such that 

(3.9) 25 is squarefree, T) is coprime to 9Jt, and w(S)) = n — 1 (mod 2). 

Then there is a quaternion F-algebra B ramified precisely at primes dividing 2) and at the 
infinite places f2, . . . ,f„ of F. The goal of the second part of this paper is to prove the 
following theorem which describes how spaces of automorphic forms discussed in the first 
part of this paper can be computed in practice. 

Theorem 3.10. There exists an explicit algorithm which, given a totally real field F of 
strict class number 1, an ideal DT C Z^?, a factorization = DVJl as in (13. 9p . and a weight 
k G (2Z>o)"; computes the systems of eigenvalues for the Hecke operators Tp with p | DVJt 
and the Atkin-Lehner involutions Wpe with p*^ || 2)971 which occur in the space of Hilbert 
modular cusp forms S'fc(OX)^""^'". 

8 



By this we mean that we will exhibit an explicit finite procedure which takes as input the 
field F, the ideals D and 9Jt, and the integer k, and produces as output a set of sequences 
(ap)p with Op G Q which are the Hecke eigenvalues of the finite set of S-newforms in S'2(0^). 
The algorithm will produce the eigenvalues Op in any desired ordering of the primes p. 

Remark 3.11. Generalizations of these techniques will apply when the strict class number of 
F is greater than 1. In this case, the canonical model X for the Shimura curve associated 
to B is the disjoint union of components defined over the strict class field of F and indexed 
by the strict ideal class group of Z^?. The Hecke operators and Atkin-Lehner involutions 
then permute these components nontrivially and one must take account of this additional 
combinatorial data when doing computations. Because of this additional difficulty (see also 
Remark 15.41 below), we leave this natural extension as a future project. 

We note however that it is a folklore conjecture that if one orders totally real fields by their 
discriminant, then a (substantial) positive proportion of fields will have strict class number 
1. For this reason, we are content to considering a situation which is already quite common. 

4. Algorithms for quaternion algebras 

We refer to work of Kirschmer and the second author [25J as a reference for algorithms for 
quaternion algebras. We will follow the notation and conventions therein. 

To even begin to work with the algorithm implied by Theorem 13.101 we must first find 

a representative quaternion algebra B = with discriminant 25 which is ramified at 

all but one real place. From the point of view of effective computability, one can simply 
enumerate elements a, 6 G Z^? \ {0} and then compute the discriminant of the corresponding 
algebra [IQ] until an appropriate representative is found. (Since such an algebra exists, this 
algorithm always terminates after a finite amount of time.) In practice, it is much more 
efficient to compute as follows. 

Algorithm 4.1. This algorithm takes as input a discriminant ideal G T^p, the product 
of distinct prime ideals with u{D) = n — 1 (mod 2), and returns a,b E Zi? such that the 

quaternion algebra B = discriminant 2). 

1. Find a G 2) such that v{a) > for at most one real place vi of F and such that 
aZp = 2)b with D + b = Zp and b odd. 

2. Find t G Zp/SaZp such that the following hold: 

• For all primes p | 2), we have ( - ] = —1; 



• For all primes q | b, we have (-1=1; and 

• For all prime powers r*^ || SZ^r with r f 2), we have t = 1 (mod r'^). 

3. Find m G Z^? such that b = t + Sam G Z^? is prime and such that v{b) < for all 
V ^ V\ and either V\{a) > or fi(6) > 0. 

Since our theorem does not depend on the correctness of this algorithm, we leave it to 

the reader to verify that the algebra B = output by this algorithm has indeed the 

correct set of ramified places. 



Remark 4.2. When possible, it is often helpful in practice to have al^p = S), though this 
requires the computation of a generator for the ideal !D with the correct real signs; for 
example, if D = and there exists a unit u G such that v{u) > for a unique real 

place V = Vi and such that u = 1 (mod 8), then we may simply take B = 

One may wish to be alternate between Steps 2 and 3 in searching for b. Finally, we note 
that in Step 2 one may either find the element t by deterministic or probabilistic means. 

Given this representative algebra B, there are algorithms |10] to compute a maximal order 
O G B, which is represented in bits by a pseudobasis. Furthermore, given a prime p f 2) 
there exists an algorithm to compute an embedding : O ^ M2{1'F,fi) where Zp^p denotes 
the completion of F at p. As a consequence, one can compute an Eichler order Oo(^) C O 
for any level Dl C Z^?. 

5. Computing in the cohomology of a Shimura curve 

In this section, we show how to compute explicitly in first cohomology group of a Shimura 
curve, equipped with its Hecke module structure. Throughout, we abbreviate F = F^(DT) 
and O = Co(5T) as above. 

In the choices of embeddings ti, . . . , t„ in fl2.3p and ( 12. Sp . we may assume without loss of 
generality that their image is contained in M2{K) with C a number field containing F; 

in other words, we may take K to be any Galois number field containing F which splits B. 
In particular, we note that then that image of ii(-B) is contained in i^TH M. So throughout, 
we may work throughout with the coefficient module 

n 

V{K) = (^P^XK){-w./2) 

i=l 

since obviously V{K) ®x C = V{C). The i^- vector space V{K) is then equipped with an 
action of F via l which can be represented using exact arithmetic over K. 

Remark 5.1. In fact, one can take the image of t to be contained in M2(Z/^) for an appropriate 
choice of K, where denotes the ring of integers of K. Therefore, one could alternatively 
work with V{'Lk) as a Z^^-module and thereby recover from this integral stucture more 
information about the structure of this module. In the case where = (2, 2, . . . , 2), we may 
work already with the coefficient module Z, and we do so in Algorithm 15.91 below. 

The first main ingredient we will use is an algorithm of the second author [55] . 

Proposition 5.2. There exists an algorithm which, given T , returns a finite presentation 
for F with a minimal set of generators and a solution to the word problem for the computed 
presentation. 

Remark 5.3. One must choose a point p G "H with trivial stabilizer Fp = {1} in the above 
algorithm, but a random choice of a point in any compact domain will have trivial stabilizer 
with probability 1. The algorithm also yields a fundmental domain J-" for F which is, in fact 
a hyperbolic polygon. For each element 7 of our minimal set of generators, J-" and 7^-" share 
a single side. In other words, there is a unique side s oi F such 7s is also a side of J-". We 
say that 7 is a side pairing element for s and 7s. 
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Remark 5.4. The algorithms of the second author [38] concern the computation of a funda- 
mental domain for Of /{±1} acting on "H, where Of denote the subgroup of consisting 
of elements of reduced norm 1. Since we have assumed that F has narrow class number 1, 
the natural inclusion Of ^ induces an isomorphism 

of/{±i} ^o^/z^ = r. 

Indeed, if 7 G Oo(^)+5 then nrd7 G Zp_^_ = Zf-^ so if nrd7 = then 7/u maps to 7 in the 
above map. 

Let G denote a set of generators for F and R a set of relations in the generators G, 
computed as in PropositionO We identify Z\T, V{K)) with its image under the inclusion 

ja:Z\T,V{K))^^V{K) 

g€G 

f ^ U'i9))9eG- 

It follows that Z\T,V{K)) consists of those / G ^g^(.V{K) which satisfy /(r) = for 
r & R; these become linear relations written out using the crossed homomorphism property 
(13. ip . and so an explicit i^-basis for Z^{r,V{K)) can be computed using linear algebra. 
The space of principal crossed homomorphisms (13. 2p is obtained similarly, where a basis is 
obtained from any basis for V{K). We obtain from this a i^-basis for the quotient 

H\T, V{K)) = Z\T, V{K))/B\T, V{K)) 

and an explicit iT-linear map Z\T, V{K)) H\T, V{K)). 

We first decompose the space H^{r,V{K)) into ±-eigenspaces for complex conjugation 
Woo as in (13. 6p . An element fi G with f i(nrd(/i)) < can be found simply by enumeration 
of elements in O. Given such an element /i, we can then find a i^-basis for the subspace 
H^{T, V{K))~^ by linear algebra. 

Remark 5.5. This exhaustive search in practice benefits substantially from the methods of 
Kirschmer and the second author using the absolute reduced norm on O, which gives 
the structure of a lattice on O so that an LLL-lattice reduction can be performed. 

Next, we compute explicitly the action of the Hecke operators on the i^- vector space 
H^{T,V)^. Let p C Zp he an ideal with p f DDT and let vr C O be such that nrdvr is a 
totally positive generator of vr. We need to compute explicitly a coset decomposition as in 
(12. 6p . Now the set 0{p) = O^ttO^ is in natural bijection with the set of elements whose 
reduced norm generates p; associating to such an element the left ideal that it generates 
gives a bijection between the set 0^\0{p) and the set of left ideals of reduced norm p, and 
in particular shows that the decomposition (12.60 is independent of vr. But this set of left 
ideals in turn is in bijection [25l Lemma 6.2] with the set P^(Fp): explicitly, given a splitting 
Lp : O ^ M2(Zir^p), the left ideal corresponding to a point a = (x : G P"'^(Fp) is 

(5.6) 4:=0.-i(^^ o)+^P- 

For a G P^(Fp), we let aa E O he such that Oaa = la and nrdoa = nrdvr. We have shown 
that 

Oip) = O'^nO'' = y 0^«a. 

aePi(Fp) 
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To compute the aa, we use the following proposition [25]. 

Proposition 5.7. There exists an (explicit) algorithm which, given a left O-ideal I, returns 
a & O such that Oa = I . 

If t>i(nrdQ;a) happens to be negative, then replace aa by /iOa. Intersection with then 
yields the decomposition (12. 6p . 

Next, in order to use equation (13. 4p to compute (/|Tp)(7) for all 7 G G, we need to 
compute to compute the permutations a h-> 7*0 of P"^(Fp) = Fp U {00}. 

Algorithm 5.8. Given 7 G F, this algorithm returns the permutation a 1— 7*0. 

1. Let f3 = ip(aa7) ^ ^2(y'^F,p) and let f3ij denote the ijth entry of /3 for i,j = 1, 2. 

2. If ordp(/3ii) < then return Pu/Pu mod p. 

3. If ordp(/9i2) = or ordp(/32i) > then return 00. 

4. Otherwise, return /322//321 mod p. 

The proof that this algorithm gives correct output is straightforward. 

Having computed the permutation 7*, for each a G P^(Fp) we compute 6a = aa7a~4 ^ ^ 
as in (13. 3p . By Proposition 15. 2[ we can write Sa as a word in the generators G for F, and 
using the crossed homomorphism property (13.11) for each / G Z^{r,V{K))^ we compute 
/ I Tp G Z\T, V{K))+ by computing (/ | rp)(7) G V{K) for 7 G G. 

Finally, we compute the Atkin-Lehner involutions Wpe for p'^ || as in (13.71) . We 
compute an element vr G O with totally positive reduced norm such that vr generates the 
unique two-sided ideal / of Co(^) of norm p*^. The ideal / can be computed easily [25], and 
a generator tt can be computed again using Proposition 15.71 

We then decompose the space H^(T, V{K)) under the action of the Hecke operators into 
Hecke irreducible subspaces for each operator Tp, and from this we compute the systems of 
Hecke eigenvalues using straightforward linear algebra over K. (Very often it turns out in 
practice that a single operator Tp is enough to break up the space into Hecke irreducible 
subspaces.) 

For concreteness, we summarize the algorithm in the simplest case of parallel weight 
k = (2, 2,..., 2). Here, we may work simply the coefficient module Z since the F-action 
is trivial. Moreover, the output of the computation of a fundamental domain provided by 
Proposition 15.21 is a minimal set of generators and relations with the following properties [381 
§5]: each generator g & G is labelled either elliptic or hyperbolic, and each relation becomes 
trivial in the free abelian quotient. 

Algorithm 5.9. Let p C be coprime to D. This algorithm computes the matrix of the 
Hecke operator Tp acting on if^(F,Z)"'". 

1 . Compute a minimal set of generators for F using Proposition 15. 2[ and let G denote 
the set of nonelliptic generators. Let H = ^7. 

2. Compute an element fi as in (13.60 and decompose H into ±-eigenspaces H"^ for W^c- 

3. Compute for a G P^(Fp) as in (13. 3p by Proposition 15. 7[ 

4. For each 7 G G, compute the permutation 7* of P^(Fp) using Algorithm 15. 8[ 

5. Initialize T to be the zero matrix acting on H, with rows and columns indexed by G. 

6. For each 'j E G and each a G P^(Fp), let Sa ■= aa7«^*^(a) ^ ^- Write Sa as a word in 
G using Proposition 15. 2[ and add to the column indexed by 7 the image of 6a G H. 

7. Compute the action T"*" of the matrix T on and return T"*". 
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We note that Step 1 is performed as a precomputation step as it does not depend on the 
ideal p. 

6. Higher level and relation to homology 

In this section, we consider two topics which may be skipped on a first reading. The first 
considers a simphfication if one fixes the quaternion algebra and varies the level 91. The 
second considers the relationship between our cohomological method and the well-known 
method of modular symbols. 

Higher level. Let 0{1) be a maximal order of B which contains Oo(^) and let r(l) = 
0{l)^/'ljp. From Shapiro's lemma, we have an isomorphism 

H\r{l), Coindf^^^ V{K) = H\r, V{K)) 

for any /^[rj-module V where Coindp V denotes the coinduced module V from T to r(l). 
In particular, if one fixes D and wishes to compute systems of Hecke eigenvalues for varying 
level or, one can vary the coefficient module instead of the group and so the fundamental 
domain algorithm need only be called once to compute a presentation for r(l). 

To compute the action of r(l) on the coinduced module then, we need first to enumerate 
the set of cosets r\r(l). We use a set of side pairing elements [38] for r(l), which are 
computed as part of the algorithm to compute a presentation for F. (Side pairing elements 
are defined in Remark 15. 3[ ) 

Algorithm 6.1. Let be a level and let G be a set of side pairing elements for F(l). This 
algorithm computes representatives a G F(l) such that F\F(1) = |jFa. 

1. Initialize T := {1} and A := {}. Let := G U G-\ 

2. Let 

^ '■= {gi '■ 9 ^ G, 7 G J-", gja~^ ^ F for all a E A} 
and let A := A U J-" . If J-" = 0, then return A; else, return to Step 2. 

Proof of correctness. Consider the (left) Cayley graph of F on the set G^: this is the graph 
with vertices indexed by the elements of F and directed edges 7 — )■ 5 if 5 = (77 for some 
g G G"^. Then the set F\F(1) is in bijection with the set of vertices of this graph under the 
relation which identifies two vertices if they are in the same coset modulo F. Since the set 
G"^ generates F, this graph is connected, and Step 2 is simply an algorithmic way to traverse 
the finite quotient graph. □ 

Remark 6.2. Although it is tempting to try to obtain a set of generators for F from the above 
algorithm, we note that a presentation for F may be arbitrarily more complicated than that 
of F(l) and require many more elements than the number of cosets (due to the presence of 
elliptic elements). For this reason, it is more efficient to work with the induced module than 
to compute separately a fundamental domain for F. 

To compute the Hecke operators as in §5 using this simplification, the same analysis 
applies and the only modification required is to ensure that the elements arising in 03.31) 
satisfy G Co(^) — this can obtained by simply multiplying by the appropriate element 
a G F\F(1), and in order to do this efficiently one can use a simple table lookup. 
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Homology. We now relate the cohomological approach taken above to the method using 
homology. Although the relationship between these two approaches is intuitively clear as 
the two spaces are dual, this alternative perspective also provides a link to the theory of 
modular symbols, which we briefly review now. Let 5*2 (A^) denote the C- vector space of 
classical modular cusp forms of level N and weight 2. Integration deflnes a nondegenerate 
Hecke-equivariant pairing between 5*2 (A^) and the homology group Hi{Xq{N),Z) of the 
modular curve Xo(A^). Let S2{N) denote the space of cuspidal modular symbols, i.e. linear 
combination of paths in the completed upper half-plane H* whose endpoints are cusps and 
whose images in Xo(A^) are a linear combination of loops. Manin showed that there is a 
canonical isomorphism 

S2{N)^H^{XoiN),Z). 

If 5'L2(Z) = \_\i^o{N)'ji, then the set of symbols 7j{0, cxo} = {7j(0), 7j(oo)} generate the 
space S2{N). We have an explicit description of the action of the Hecke operators on the 
space S2{N), and the Manin trick provides an algorithm for writing an arbitrary modular 
symbol as a Z-linear combination of the symbols 7i{0, oo}. 

The Shimura curves X = X^(DT) do not have cusps, and so this method does not generalize 
directly. Consider instead the sides of a fundamental domain D for F = r®(^n), and let G 
be the corresponding set of side pairing elements and R the set of minimal relations among 
them [38]. The side pairing gives an explicit characterization of the gluing relations which 
describe X as a Riemann surface, hence one obtains a complete description for the homology 
group Hi{X, Z). Let V be the set of midpoints of sides of D. Then for each v E V, there is 
a unique 7 G G such that w = jv & V, and the path from v to 'jv in H, which we denote by 
P{l) — {"^jT"^}) projects to a loop on X. Each relation r = 7172 ■ ■ - 74 = 1 from R induces 
the relation in the homology group Hi{X, Z) 

= p{l) =p(7i...7i) 

(6.3) = {v, 'jiv} + {'jiv, 7i72t^} H h {71 ■ ■ ■ It-iv, 7i ■ ■ ■ It-ilM 

= {v, -fiv} + {v, -f2v} H h {f , ^tv} = p(7i) + ^(72) H \- p{lt) 

In particular, if 7 G G is an elliptic element then ^(7) = in H^{X,Q). Let 5f (OX) be the 
Q- vector space generated by ^(7) for 7 G G modulo the relations (16. 3p with r E R. It follows 
that 

H^{X,Q)=H^{r,Q)=Sf{m) 

and we call iSf (DT) the space of Dirichlet-modular symbols for X (relative to D). 

The Hecke operators act in an analogous way, as follows. If for a G P^(Fp) is a set 
of representatives as in (13. 3p . then aa acts on the path ^(7) = {t>,7t>} by aa{v,'yv} = 
{aaV, aa'jv}; if aa'j = ^a«7*a = ^a«6 as bcforc, then in homology we obtain 

{aaV, aajv} = ^{aaV, 6aabv} = ^ {{aaV, v} + {v, 6aV} + {6aV, SaabV}) 
aGPi(Fp) a a 

= , SaV} + ^ {{aaV, V} + 6a{v, UbV}) 

a a 

= '^{V, 5aV} + ^ {-{V, aaV} + {v , UbV}) = SaV}. 
a a a 
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Thus, the action of the Hecke operators indeed agrees with that in cohomology, and so one 
could also rephrase our methods in terms of Dirichlet-modular symbols. 

The analogue of the Manin trick in our context is played by the solution to the word 
problem in F. When F = SL2(Z), the Manin trick arises directly from the Euclidean algo- 
rithm; therefore, our methods may be seen in this light as a generalization of the Euclidean 
algorithm to the group F. Already this point of view has been taken by Cremona [3] and 
his students, who generalized methods of modular symbols to the case of SL2{Ijk) for K 
an imaginary quadratic field. We point out that idea analogy between fundamental domain 
algorithms for Fuchsian groups and continued fraction algorithms goes back at leastto Eich- 
ler [16]. It seems likely therefore that many other results which follow from the theory of 
modular symbols should hold in the context of Shimura curves and Hilbert modular varieties 
as well. 



7. Cubic fields 

In this section, we tabulate some examples computed with the algorithms illustrated above. 
We perform our calculations in Magma [1]. 

First example. We first consider the cubic field F with (i^ = 1101 = 3-367 and primitive 
element w satisfying — — 9w + 12 = 0. The field F has Galois group 5*3 and strict class 
number 1. The Shimura curve X(l) = Xq^^(1) associated to F has signature (1;2^,3^) — 
according to tables of the second author |39], this is the cubic field of strict class number 1 
with smallest discriminant such that the corresponding Shimura curve has genus > 1. 

f — —w"^ + w + 1\ 

We first compute the representative quaternion algebra B = I — ^ with 



F 

discriminant D = (1) and a maximal order O, generated as a Z^T^-algebra by a and the 



element 



^ {{-8w + 14) + {-2w + A)a + {-w + 2)/3). 



We then compute a fundamental domain for F(l) = Fq^''(1); it is shown in Figure 7.1. 

We may take /i = /3 as an element to represent complex conjugation; indeed, = —w'^ + 
w + 1 & is a unit. Since the spaces if^(F,Z)^ are one-dimensional, the Hecke operators 
Tp act by scalar multiplication, and the eigenvalues are listed in Table 7.2: for each prime p 
of Zi? with A^(p) < 50, we list a generator vr of p and the eigenvalue a(p) of Tp. 

The curve X(l) has modular Jacobian E and we have ^E{¥p) = Np -|- 1 — a(p), so we 
list these values in Table 7.2 as well. By the reduction theory of Carayol P], we know that 
E is an elliptic curve over F with everywhere good reduction. (Compare this result with 
calculations of Dembele and Donnelly [13].) We note that since the a(p) for the primes p 
with A^p = 31 are not equal, the curve E does not arise as the base change of a curve defined 
over Q. 

To find a candidate curve E, we begin by searching for a curve over F with everywhere 
good reduction. We follow the methods of Cremona and Lingham [6]. 

Remark 7.1. One possible alternative approach to find an equation for the curve E would 
be to use the data computed above to give congruence conditions on a minimal Weierstrass 
model for E 

E : y"^ + aixy + a^y = + a2X^ + a^x'^ + Og 
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Figure 7.1: A fundamental domain for X{1) for dp = 1101 
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w-2 
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w — 3 


-3 
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w — 1 


-1 
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w"^ + w — 7 


-3 


8 


19 


w + 1 


-6 


26 


23 


w'^ — 2w — 1 


6 


18 


31 


2w^ - 19 


3 


29 


31 


w'^ — 5 





32 


31 


3w — 5 


4 


28 


41 


+ 2w-7 





42 


43 


- 11 


9 


35 


47 


3w-7 


-9 


57 



Table 7.2: Hecke eigenvalues for the group r(l) for dp = 1101 

with tti G Zp. For example, by coordinate change for y, without loss of generality we may 
assume that Oi, 03 are chosen from representatives of the set Z^/2Zi7, and since the reduction 
of E modulo the prime p with A^p = 2 is supersingular, and a Weierstrass model for such 
curve is of the form y"^ + y = f{x), we may assume that ai = (mod w — 2) and 03 = 1 
(mod w — 2), leaving 4 possibilities each for 01,03. In a similar way, we obtain further 
congruences. In our case, this approach fails to find a model, but we expect it will be useful 
in many cases. 

Remark 7.2. When F is a real quadratic field, there are methods of Dembele which apply 
pT| to find an equation for the curve E by computing the real periods of E. 

In our situation, where F has (strict) class number 1, we conclude (see Cremona and 
Lingman [SI Propositions 3.2-3.3]) that there exists w G VpjVp and an integral point 
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on the elliptic curve Ey^ : y"^ = — 1728w such that E has j'-invariant j = x^/w = 
1728 + y'^/w. In our situation, we need not provably enumerate all such curves and content 
ourselves to find as many such integral points as we can. Indeed, we find for the unit 
w = —1506w^ + 6150m7 — 5651 G l^p that the curve E^ has rank 3 and we find an integral 
point 

(-llw^ - 2Aw + 144, -U5w^ + 1245w - 132) e E^iF); 

this point corresponds to a curve with j-invariant 

{-2w^ -Aw + 7Y{2w^ + w- I7f{w - 2Y\w - 3)^ = -1805^^ - 867w; + 14820 

where we note that the first two terms are units and recall that N{w — 2) = 2, N{w — 3) = —3. 
We then find an appropriate quadratic twist of this curve which has conductor (1) = as 
follows: 

A : y'^ + w{w + l)xy + {w + l)y = x^ + w'^x^ + 040; + ag 

where 

04 = -139671409350296864u>2 - 235681481839938468^+ 623672370161912822 

and 

ae = 110726054056401930182106463w2+186839095087977344668356726w-494423184252818697135532743. 
We verify that #A(Fp) = N{p) + 1 —a{p) in agreement with the above table, so this strongly 
suggests that the Jacobian E = J(l) of X{1) is isogenous to A (and probably isomorphic to 
A). 

To prove that in fact E is isogeneous to A, we use the method of Faltings and Serre. (For 
an exposition of this method, see Schiitt |29l §5] and Dieulefait, Guerberoff, and Pacetti [TH 
§4], and the references contained therein.) 

Let Pe,Pa '■ Gal(F/F) — )■ 012(^2) be the 2-adic Galois representations associated to 
the 2-adic Tate modules of E and A, respectively, and let Pe,Pa '■ Gal(F/F) — )■ GL2(F2) be 
their reductions modulo 2. We will show that we have an isomorphism p^ = p^ of absolutely 
irreducible representations and then lift this to an isomorphism — Pa by comparing traces 
of p^; and pA- It then follows from work of Faltings that E is isogeneous to A. 

First we show that the representations p^ and p^ are absolutely irreducible and isomorphic. 
(It is automatic that they have the same determinant, the cyclotomic character.) For E, it 
is clear from Table 7.2 that the image of p^ contains elements both of even and odd order 
and so must be all of GL2(F2) = S3. For A, we verify that the 2-division polynomial is 
irreducible, and adjoining a root of this polynomial to F we obtain a field which is more 
simply given by the polynomial 

x^ + {w + l)x^ + {w^ + w- 5)x + {w^ + w -7) 

and with relative discriminant 4Z^; the splitting field L of this polynomial indeed has Galois 
group isomorphic to S3. 

At the same time, the field cut out by p^ is an S'3-extension of F which is unramified 
away from 2. We may enumerate all such fields using class field theory, as follows. Any such 
extension has a unique quadratic subextension which is also unramified away from 2 and by 
Kummer theory is given by adjoining the square root of a 2-unit a G Zp. Since 27jf = P2P2 
with p2 = {w — 2)Zp, p2 = (w^ + w — 7)Zp (of inertial degrees 1,2, respectively), we see that 
there are 31 = 2'^+^ — 1 possibilities for a. Now for each quadratic extension K, we look for 
a cyclic cubic extension which is unramified away from 2 and which generates a Galois field 
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over F. By class field theory, we computing the complete list, and in fact wc find a unique 
such field and thereby recover the field L. The field L arises from the quadratic subfield 
K = F{y/u), where u = —19w^ — 32w + 85 e Z^; the class group of K is trivial, but the ray 
class group modulo p2 = (w — 2)Zf is isomorphic to Z/3Z. We have therefore indeed shown 
that and are isomorphic. 

Next, we lift this isomorphism to one between pe and pa_- Following Faltings and Serre, 
we must first compute all quadratic extensions M of L which are unramified away from 2. 
We find that the 2- unit group of Z/, modulo squares has rank 16 over Z/2Z; in other words, 
we have 16 independent quadratic characters of L. To each odd ideal 21 of Z^, we associate 
the corresponding vector f (2t) = {x{'^))x G {±1}^^ of values of these 16 characters. Then 
for each v G {±1}^^, wc need to find an odd ideal 21 of Z^ such that f (21) = v and then 
verify that p^(Froba) = p£;(Frob|i), where o = Zp n 21. For this, it is enough to verify that 
trp^(Frob(,) = tr p£;(Frob(,). Moreover, by multiplicativity, thinking of {±1}^^ as an F2- 
vector space in a natural way, it is enough to verify this for a set of odd primes *P of Zj^ such 
that the values v{^) span {±1}^^. We find that the set of primes ^ of Z^ which lie above 
primes p of of norm at most 239 will suffice for this purpose, and for this set we indeed 
verify that the Hecke eigenvalues agree. (In other words, we verify that ^E(¥p) = #A(Fp) 
for enough primes p of Z^? to ensure that in fact equality holds for all odd primes p of Z^?, 
whence pj = pA-) Therefore E is isogeneous to A, and we have explicitly identified the 
isogeny class of the Jacobian of the Shimura curve -^(1) over F. 

Second example. As a second example, we consider the Galois cubic field with dp — 
1369 = 37^, so that F is the (unique totally real) cubic field in Q(C37)- The field F is 
generated by an element w satisfying — w"^ — 12w — 11. Here, the associated Shimura 
curve of level and discriminant 1 has signature (1;2^,3^). Computing as above, we obtain 
the Hecke eigenvalues listed in Table 7.3. 



A^p 


a(p) 
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-5 


14 


11 


-2 


14 


23 


-4 


28 


27 





28 


29 


9 


21 


31 


-10 


42 


37 


-11 


49 


43 


2 


42 


47 


6 


42 



Table 7.3: Hecke eigenvalues for the group r(l) for dp = 1369 

Let E denote the Jacobian of the Shimura curve X(l) under consideration. Since ^E(¥p) 
is always divisible by 7, it is reasonable to believe that E has a nontrivial 7-torsion point. 
A quick search for F-rational points on Xi{7) (using the Tate model) yields a curve A with 
minimal model 

A : y^+{w^+w+l)xy = x^+{-w-l)x'^ + {256w^+850w+641)x+{5048w^+16881w+12777) 
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with ^A{¥p) as above. Since y4[7](F) is nontrivial, an argument of Skinner- Wiles |33] shows 
that in fact A is isogenous to E. 

We note that the eigenvalue a(p) does not depend on the choice of prime p above p, 
which suggests that E should come as a base change from a curve defined over Q. Indeed, 
it can be shown by Galois descent (arising from the functoriality of the Shimura-Deligne 
canonical model) that the curve X{1) has field of moduli equal to Q. Looking at the curves 
of conductor 1369 in Cremona's tables [1], we find that A is in fact the base change to E of 
the curve 

1369bl ■.y^ + xy = x^-x'^ + 3166x - 59359. 

Third example. We conclude with a third example for which the dimension of the space of 
cuspforms is greater than 1. The first cubic field E for which this occurs has dp = 961 = 31^, 
and the signature of the corresponding Shimura curve X{1) is (2; 2^, 3). Since this field E 
is Galois, by Galois descent the corresponding L-function is a base change from Q. We list 
the characteristic polynomial x(^p) of Hecke operators Tp in Table 7.4. 







2 


x'^ + 2x-l 


23 


+ 8x + 16 


27 


x^ -4x- 28 


29 


x^ + 8x + 8 


31 


x^ + 20x + 100 


47 


— 8x — 16 



Table 7.4: Hecke eigenvalues for the group r(l) for dp = 961 

We see that Q(Tp) = 0(^5), so the Jacobian J of X(l) is an abelian surface with real 
multiplication by Q(a/5). Computing via modular symbols the space of newforms for the 
classical modular group ro(961), we find that these characteristic polynomials indeed match 
a newform with g-expansion 

q + wq'^ + wq^ + {-2w - l)q^ H 4g^^ H {2w + 6)g^^ + . . . 

where w"^ + 2w — 1=0. It is interesting to note that there are six 2-dimensional (irreducible) 
new Hecke eigenspaces for ro(961) and only one of the corresponding forms corresponds to 
an abelian surface which acquires everywhere good reduction over E. 

Comments. Combining the above methods with those of Dembele and Donnelly, one can 
systematically enumerate Hilbert modular forms over a wide variety of totally real fields and 
conductors. This project has been initiated by Donnelly and the second author [15], and we 
refer to this upcoming work for many, many more examples for fields up to degree 6. 

We conclude with a few comments on the efficiency of our algorithms. Unfortunately, we 
have no provable assessment of the running time of our method. In practice, the computation 
of a fundamental domain seems to be the most (unpredictably) time-consuming step, taking 
on the order of minutes on a standard PC for cubic and quintic fields of small discriminant; 
but this step should be considered a precomputation step as it need be done only once for 
each field E. The computation of a single Hecke operator takes on the order of seconds (for 
the examples above) to a few minutes (for quintic fields), the most onerous step being the 
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principalization step (Proposition 15. 7p and the bookkeeping involved in working with the 
induced module; with further careful optimization, we believe that this running time can be 
substantially lowered. 
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